Facebook to blab bugs it finds if it thinks code owners aren’t fixing fast enough

Facebook has published its first Vulnerability Disclosure Policy and given itself grounds to blab the existence of bugs to the world if it thinks that’s the right thing to do. “Facebook may occasionally find critical security bugs or vulnerabilities in third-party code and systems, including open source software,” the company …

[Chris G]

Amazing!

Vulnerabilities reporting vulnerabilities.

[RyokuMas]

On whose authority?

So basically, we're getting second self-appointed police agency for the internet - albeit not as wide-ranging as Project Zero?

[Anonymous Coward]

smacks of desperation?

Why are FB so desperate for notice that they would enter the software wikilinks arena? have they lost some revenue stream I do not know about? or is it just an attempt to hijack the integrity of bug hunters

[iron]

Re: smacks of desperation?

Probably trying to deflect from the fact that their emtire company / site / product portfolio is one giant security hole.

[Someone Else]

Something about a pot and a kettle...

And who the fuck is Fa(r)cebook to be the arbiter of software "correctness"? Are they in the business now of selling software? Are they getting paid to get into Software Quality Assurance? (Lord knows that Zuck wouldn't do anything without the possibility of profit, and certainly won't do anything that might reduce the possibility of profit.) Or maybe it's just that Zuck the Fuck has been fellating the Great Orange-utan enough that he thinks his shit doesn't stink, and he, too, can get away with anything.

_{Perhaps even shooting someone on 5th Avenue...}